Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2023-30172

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wc6j-5g83-xfm6

mflow vulnerable to directory traversal A directory traversal vulnerability in the /get-artifact API method of the mlflow platform prior to v2.0.0 allows attackers to read arbitrary files on the server via the path parameter.

gitlab/pypi/mlflow/CVE-2023-30172

mflow vulnerable to directory traversal A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.

pypa/mlflow/PYSEC-2023-70

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.

pysec/PYSEC-2023-70

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.